CSB wrote: > I want to capture all my Asterisk traffic (including RTP) and then > analyse it. > > My plan was to use tcpdump and then analyse with Wireshark. The > following works: > tcpdump -i eth0 -s 0 -w /tmp/tcpdump.1 > > But I want to be a bit more selective: > tcpdump -C 100 -W 10 -w /tmp/tcpdump -i eth1 -s 0 udp and dst port >= 5060 > > This doesn't capture the RTP traffic. Could anyone advise what I'm doing > wrong or suggest a better way?
Well, the first thing I notice is that your first tcpdump example is listening on eth0, and the second is listening on eth1. What happens when you do tcpdump -i eth1 -s 0 -w /tmp/tcpdump.1 Do you see the RTP traffic then? -Stephen- _______________________________________________ --Bandwidth and Colocation provided by Easynews.com -- asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
